Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/R9bIdHxLkZa8XhUAzcvp8gbA3s0.roa
File: R9bIdHxLkZa8XhUAzcvp8gbA3s0.roa (raw, json)
Hash identifier: 9YpXlQnr6c0QkxIHOvCMNmsQ6cK/yYObjuCPnwoCfms=
Subject key identifier: 47:D6:C8:74:7C:4B:91:96:BC:5E:15:00:CD:CB:E9:F2:06:C0:DE:CD
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 01942826AFA7A68C8F6B7F7EEF996B8AF7E7
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/R9bIdHxLkZa8XhUAzcvp8gbA3s0.roa
Signing time: Thu 02 Jan 2025 17:53:31 +0000
ROA not before: Thu 02 Jan 2025 17:53:31 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 23013
IP address blocks: 88.216.130.0/24 maxlen: 24
88.216.132.0/24 maxlen: 24
88.216.188.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.mft
rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 22 Feb 2025 02:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:26:af:a7:a6:8c:8f:6b:7f:7e:ef:99:6b:8a:f7:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Jan 2 17:53:31 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=47d6c8747c4b9196bc5e1500cdcbe9f206c0decd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:d0:fe:60:d0:7f:a4:1c:58:43:70:99:da:f3:
c8:53:ad:ac:eb:42:4c:e7:dd:b5:f0:4d:7c:b6:f8:
74:ae:66:ae:5d:e2:73:6f:fa:fc:ff:0c:02:b8:20:
5a:df:6d:bb:e3:d8:d5:04:1b:48:20:92:8e:38:ce:
e5:53:47:c0:ba:02:3e:7d:b9:0b:0f:79:6e:a9:33:
c2:25:d4:9e:d3:47:45:91:e2:81:07:02:d4:2c:75:
28:a0:8d:2c:69:ef:e2:d7:e5:b4:5c:80:c2:5a:cb:
71:66:2d:ba:59:32:71:24:30:df:3a:e3:f7:73:35:
63:63:87:2b:25:2f:b2:c1:1e:8a:ef:28:69:e9:f8:
c9:b1:1c:26:ea:f7:3a:18:67:e7:1e:7f:ea:c3:44:
44:fa:31:66:d8:86:b7:77:8e:f4:86:4a:0d:b8:e9:
dd:ea:70:48:5b:07:dc:15:69:ec:f1:f1:87:02:cc:
bb:9b:df:62:d3:1a:a3:38:68:d3:2f:dc:5f:63:3c:
ec:1d:9b:55:8e:55:ef:08:1b:53:15:fb:86:98:74:
6d:50:18:f9:19:24:71:82:22:1b:14:2b:c5:31:b9:
5a:38:75:f9:23:58:d7:55:3a:fe:d6:55:7f:14:c2:
53:d9:df:38:50:a6:01:c9:64:75:21:0f:7c:26:e6:
ca:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:D6:C8:74:7C:4B:91:96:BC:5E:15:00:CD:CB:E9:F2:06:C0:DE:CD
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/R9bIdHxLkZa8XhUAzcvp8gbA3s0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.216.130.0/24
88.216.132.0/24
88.216.188.0/22
Signature Algorithm: sha256WithRSAEncryption
88:0b:52:95:20:3b:80:e8:37:63:55:6a:5c:ba:9c:61:92:4d:
bd:5b:eb:43:fd:90:18:05:f8:88:fd:c6:54:2f:66:72:ca:e4:
6c:42:aa:11:c0:92:0b:df:19:6b:ee:70:3b:63:b3:f4:45:3c:
83:4a:0b:ec:f9:6a:97:f1:36:ca:d3:af:49:94:bd:b6:3d:a2:
c2:53:bf:d9:0d:bd:c8:a7:3a:69:72:4e:2f:84:28:70:44:32:
ce:ad:9c:d7:83:fe:f3:1e:fe:6c:e3:f0:f3:3e:bc:56:53:6a:
06:21:ef:3a:b5:03:d1:30:6a:7f:90:47:bd:ca:d3:c2:81:ba:
18:ed:71:1d:45:5e:ed:59:e2:2a:f6:65:85:75:23:49:a9:e9:
8b:22:57:e1:90:62:b2:14:fd:57:92:7b:9d:f0:90:ea:6b:ac:
50:5a:34:3b:e2:32:74:f1:51:7e:9b:4a:a9:c0:0a:33:86:9e:
04:e6:0e:80:16:a0:5f:ce:db:b0:1b:e6:b3:9d:41:1d:af:2e:
d0:d3:c3:b6:53:e8:25:29:1e:e4:7d:9e:78:cc:3a:08:38:1e:
ad:03:90:eb:03:b4:95:a9:51:16:61:24:7c:a9:1c:55:dc:79:
84:8c:3b:88:59:86:0e:1d:04:66:11:d5:1a:86:7c:b8:23:25:
0b:4e:da:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:20:27 2025 by rpki-client